CVE-2011-0480: Buffer Overflow
Multiple buffer overflows in vorbisdec.c in the Vorbis decoder in FFmpeg, as used in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted WebM file, related to buffers for (1) the channel floor and (2) the channel residue.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-0480?
CVE-2011-0480 has a severity rating that indicates it can lead to denial of service and potential memory corruption.
How do I fix CVE-2011-0480?
To fix CVE-2011-0480, update to the latest version of Google Chrome or Google Chrome OS that is beyond the specified vulnerable versions.
Which versions are affected by CVE-2011-0480?
CVE-2011-0480 affects Google Chrome versions before 8.0.552.237 and Google Chrome OS versions before 8.0.552.344, among others.
What type of vulnerability is CVE-2011-0480?
CVE-2011-0480 is classified as a buffer overflow vulnerability in the Vorbis decoder within FFmpeg.
Can CVE-2011-0480 be exploited remotely?
Yes, CVE-2011-0480 can be exploited by remote attackers to cause application crashes or other unspecified impacts.